Static task
static1
Behavioral task
behavioral1
Sample
Document_BT24PDF.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Document_BT24PDF.exe
Resource
win10v2004-20240226-en
General
-
Target
10a65e425d1477d5e71f71a78f5bcaaf_JaffaCakes118
-
Size
1.2MB
-
MD5
10a65e425d1477d5e71f71a78f5bcaaf
-
SHA1
93003d35a1435f82b108bdf54f004f51f0534674
-
SHA256
b2659b76bc5bb792af4a22b55a15aa4619a74f40bfb0326b9a46ee4820646d77
-
SHA512
53513b8a57d6ce9771ff28d72434882ea83bc8a41b99dd5fe732c70b38c660b13386544ec6e1e11eedac6cc4096981b85a725a1f8e209974db1e8a315f2560e4
-
SSDEEP
12288:wpF/jmBcdGXTK8+2K+Pjf/dKl1niU1vvxWSgjvwd5uDqt3Wvwki+LHuXifkIKtqx:MwadLCjfglUwvxWN4T3pk5ht2xBg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Document_BT24PDF.exe
Files
-
10a65e425d1477d5e71f71a78f5bcaaf_JaffaCakes118.eml
-
http://www.agroconcept.ro/
-
-
9fdb1c67.png.png
-
Document_BT24PDF.iso.iso
-
Document_BT24PDF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 819KB - Virtual size: 819KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
email-html-2.txt.html
-
email-plain-1.txt